io.picodata.jdbc.ssl

Class PicodataSSLSocketFactory

java.lang.Object

javax.net.SocketFactory

javax.net.ssl.SSLSocketFactory

io.picodata.jdbc.ssl.PicodataSSLSocketFactory

public class PicodataSSLSocketFactory
extends SSLSocketFactory

SSLSocketFactory implementation that works with PKCS#8 (single-key, single-cert container) and PKCS#12 (multi-key, multi-cert container) keystores. Use Java keytool to create PKCS#* containers from traditional (PKCS#1) PEM files generated by ssl-keygen and other similar tools.

The following connection parameters are used:

• sslMode: determines the strictness of server and client certificate checks. For implementing mTLS, set this parameter to "verify-ca" or verify-full" and provide the path to root CA certificate. The cerver certificate must be signed by the same CA. See SslMode for the other supported modes. The default mode is "require".
• sslCert: absolute path to the client certificate file or keystore
• sslKey: absolute path to the client private key file or keystore
• sslRootCert: (optional) absolute path to the root CA file or keystore for server certificate verification
• sslPassword: (optional) single password for all keystores, if any of them are password-encrypted
• sslPasswordCallback: (optional) full classname of a custom CallbackHandler implementation. If any of the keystores are encrypted, and no password and callback are provided, the password will be asked from console - note that this might silently halt the application.
• sslHostnameVerifier: (optional) full classname of a custom HostnameVerifier implementation, used for the server hostname verification in "verify-full" mode. The hostname verifier provided by pgJDBC is used by default.

Look into the PicodataProperty class documentation to find more about the connection parameters' default values.

Constructor Summary

Constructors

Constructor and Description
PicodataSSLSocketFactory(Properties info)

Method Summary

Modifier and Type	Method and Description
Socket	createSocket(InetAddress host, int port)
Socket	createSocket(InetAddress address, int port, InetAddress localAddress, int localPort)
Socket	createSocket(Socket socket, String host, int port, boolean autoClose)
Socket	createSocket(String host, int port)
Socket	createSocket(String host, int port, InetAddress localHost, int localPort)
String[]	getDefaultCipherSuites()
SSLSocketFactory	getFactory() Get initialized SSL socket factory instance
String[]	getSupportedCipherSuites()

Methods inherited from class javax.net.ssl.SSLSocketFactory

createSocket, getDefault

Methods inherited from class javax.net.SocketFactory

createSocket

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PicodataSSLSocketFactory

public PicodataSSLSocketFactory(Properties info)
                         throws PicodataSQLException

Parameters:

info - the connection parameters

Throws:

PicodataSQLException - if any error arises from the Java security classes when initializing factory

Method Detail

getFactory

public SSLSocketFactory getFactory()

Get initialized SSL socket factory instance

Returns:

socket factory instance

createSocket

public Socket createSocket(InetAddress host,
                           int port)
                    throws IOException

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(String host,
                           int port)
                    throws IOException

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(String host,
                           int port,
                           InetAddress localHost,
                           int localPort)
                    throws IOException

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(InetAddress address,
                           int port,
                           InetAddress localAddress,
                           int localPort)
                    throws IOException

Specified by:

createSocket in class SocketFactory

Throws:

IOException

createSocket

public Socket createSocket(Socket socket,
                           String host,
                           int port,
                           boolean autoClose)
                    throws IOException

Specified by:

createSocket in class SSLSocketFactory

Throws:

IOException

getDefaultCipherSuites

public String[] getDefaultCipherSuites()

Specified by:

getDefaultCipherSuites in class SSLSocketFactory

getSupportedCipherSuites

public String[] getSupportedCipherSuites()

Specified by:

getSupportedCipherSuites in class SSLSocketFactory